Privacy Policy

Your privacy matters. This policy explains how TaskCentro collects, uses, and safeguards your personal data in compliance with Zambia's Data Protection Act No. 3 of 2021.

Effective: 2026 Data Protection Act No. 3 of 2021 Lusaka, Zambia

This Privacy Policy describes the policies and procedures of TaskCentro Services Limited on the collection, use, and disclosure of your personal data when you use the Platform. It sets out your privacy rights as a data subject and explains how the law protects you.

TaskCentro Services Limited handles your personal data in compliance with the Data Protection Act No. 3 of 2021 of the Republic of Zambia (the "Act"). This Policy should be read together with our Terms and Conditions.

1

Interpretation and Definitions

Words with capitalised initial letters have meanings defined below. These definitions apply whether terms appear in singular or plural form.

Account
a unique account created for you to access the Platform or parts of the Platform.
Client
a user who accesses the Platform to post jobs and engage Freelancers for services.
Company
("TaskCentro", "we", "us", or "our") — TaskCentro Services Limited, registered at The United Church of Zambia Synod Building, Plot No. 8, Ground Floor, Northern Wing, Mosi O Tunya Road, Woodlands, Lusaka, Zambia.
Data Controller
TaskCentro Services Limited, which determines the purposes and means of processing your personal data.
Data Processor
any natural or legal person who processes personal data on behalf of and under the instruction of TaskCentro.
Data Protection Commissioner
the Commissioner appointed under the Data Protection Act No. 3 of 2021.
Freelancer
a user who registers on the Platform to offer and provide services to Clients.
Personal Data
any information that relates to an identified or identifiable individual, as defined under the Act.
Platform
the TaskCentro web and mobile application and all associated services.
Sensitive Personal Data
has the meaning assigned under Section 2 of the Act, including identity documents, biometric data, and professional credential data.
Service Provider
Cellulant Zambia Limited (trading as Tingg), and any other third-party engaged by TaskCentro to facilitate the Platform.
Usage Data
data collected automatically from your use of the Platform, including IP address, browser type, pages visited, and device identifiers.
2

Data Controller

TaskCentro Services Limited is the data controller responsible for your personal data collected through this Platform. We determine the purposes for which and the means by which your personal data is processed.

TaskCentro is in the process of registering as a data controller with the Office of the Data Protection Commissioner in accordance with Section 19 of the Act.

We have designated a Data Protection Officer (DPO) to oversee compliance with this Policy and the Act.

Contact our DPO

Email: [email protected]

Website: taskcentro.com/contact

3

Personal Data We Collect

3.1 Data Collected Directly From You

  • Full name and contact details (email address, phone number)
  • Account login credentials
  • Profile information including skills, service descriptions, and profile photographs
  • Identity verification documents (for Freelancers: national ID, professional licences, certifications, and insurance documentation). Sensitive personal data is processed under Section 14(1)(b) of the Act and stored exclusively on servers within Zambia.
  • Payment information processed through Cellulant Zambia Limited (Tingg)
  • Tax compliance information where required under applicable law
  • User-generated content including photos, videos, documents, and text
  • Reviews and ratings submitted about Freelancers
  • Communications and correspondence with other users or with TaskCentro

3.2 Usage Data

Usage Data is collected automatically when you use the Platform. This may include your device's IP address, browser type and version, pages you visit, time and date of your visit, time spent on pages, unique device identifiers, and other diagnostic data.

3.3 Camera and Photo Library

Where you grant permission, we may access pictures and other information from your device's camera and photo library to enable Platform features. You may enable or disable this access at any time through your device settings.

4

Purpose and Lawful Basis for Processing

TaskCentro processes your personal data only where there is a lawful basis to do so under Section 13 of the Act.

Processing Purpose Lawful Basis
Registering and managing your accountPerformance of a contract — s.13(b)(i)
Verifying Freelancer identity, licences & insurancePerformance of contract; legitimate interests — s.13(b)(i)(v)
Facilitating job posting, bidding & service deliveryPerformance of a contract — s.13(b)(i)
Processing payments through TinggPerformance of a contract — s.13(b)(i)
Tax complianceLegal obligation — s.13(b)(ii)
Communication about your account & transactionsPerformance of contract; legitimate interests — s.13(b)(i)(v)
Fraud detection and preventionLegitimate interests — s.13(b)(v)
Managing disputesPerformance of contract; legitimate interests — s.13(b)(i)(v)
Marketing communications about similar servicesConsent — s.13(a)
Improving & analysing Platform performanceLegitimate interests — s.13(b)(v)
Complying with legal obligations & court ordersLegal obligation — s.13(b)(ii)
Business transfers (mergers, acquisitions)Legitimate interests — s.13(b)(v)
On the TaskCentro Platform, consent covers all processing of your personal data. Withdrawal of consent at any time will result in the deletion of your account and the cessation of all processing of your personal data.
5

Automated Processing and Fraud Detection

TaskCentro employs automated fraud detection systems to monitor transactions and user activity for the purpose of preventing fraudulent or unlawful conduct. These systems may analyse patterns in usage and transaction data to flag suspicious activity.

Where an automated process produces a decision that significantly affects you — such as account suspension or transaction cancellation — you have the right under Section 62 of the Act to request human review of that decision.

No automated system makes final decisions about your account without human involvement. To request human review, contact [email protected].
6

Sharing Your Personal Data

TaskCentro does not sell your personal data. We may share your data only in the following circumstances:

Cellulant Zambia Limited (Tingg)
Our payment gateway provider. Payment data is shared solely for processing transactions on the Platform.
Other Service Providers
Third-party providers supporting hosting, analytics, and customer support, bound by data processing agreements consistent with the Act.
Other users on the Platform
Your profile, service descriptions, and reviews are visible to other users as part of normal Platform operation.
Tax authorities
Where required by Zambian tax law, we may share relevant financial data with the Zambia Revenue Authority.
Law enforcement and regulatory bodies
Where required by law, court order, or valid request by a public authority.
Business transfers
In the event of a merger, acquisition, or asset sale, you will be notified before your data is transferred and becomes subject to a different privacy policy.
With your consent
For any other purpose where you have given us prior written consent.
7

Data Storage and Cross-Border Transfers

TaskCentro processes and stores your personal data on servers located within the Republic of Zambia, in compliance with Section 70 of the Act. Sensitive personal data — including identity verification documents and professional credential data — will at all times be stored within Zambia and will not be transferred outside the Republic.

Where any operational necessity requires data to be processed outside Zambia, TaskCentro will only do so in compliance with Section 71 of the Act, including obtaining the prior approval of the Data Protection Commissioner and ensuring adequate safeguards are in place.

8

Retention of Your Personal Data

TaskCentro retains your personal data only for as long as is necessary for the purposes for which it was collected, in accordance with Section 51 of the Act.

Account data Duration of account + 1 year after closure
Transaction & payment records Minimum 7 years (tax & financial requirements)
Identity verification documents Duration of account + 1 year after closure
Tax compliance data Minimum 7 years (Zambian tax law)
Reviews and ratings Duration of Freelancer's account + 1 year
Usage & diagnostic data Maximum 2 years
Communications & correspondence Duration of account + 1 year, or until dispute is resolved
9

Security of Your Personal Data

TaskCentro implements appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure, in accordance with Section 47 of the Act. These measures include:

  • Encryption of data in transit and at rest
  • Access controls restricting data access to authorised personnel only
  • Secure server infrastructure located within Zambia
  • Regular review and testing of security systems and processes
  • Staff training on data protection obligations

While we take all reasonable steps to protect your personal data, no method of transmission over the internet is entirely secure. You are responsible for maintaining the confidentiality of your account credentials and notifying us immediately of any unauthorised access.

10

Children's Privacy

The Platform is not directed at persons under the age of 18 years. Under the laws of Zambia, a child is defined as a person under the age of eighteen (18) years. TaskCentro does not knowingly collect personal data from anyone under the age of 18.

Where a user is under the age of 18, a parent or legal guardian must provide consent before any personal data is collected or processed, in accordance with Section 17 of the Act.

If you are a parent or guardian and believe your child has provided us with personal data without consent, please contact us at [email protected].

11

Your Data Protection Rights

Under the Data Protection Act No. 3 of 2021, you have the following rights. To exercise any of these rights, contact us at [email protected].

Right of Access (Section 58) Request confirmation of whether we hold personal data about you and obtain a copy, including purposes and third parties with whom it has been shared.
Right to Rectification (Section 59) Request that we correct any inaccurate or incomplete personal data we hold about you.
Right to Erasure (Section 60) Request deletion of your personal data where it is no longer necessary, where you withdraw consent, or where it has been unlawfully processed.
Right to Object (Section 61) Object at any time to the processing of your personal data, including for direct marketing purposes.
Right to Restrict Processing (Section 63) Request that we pause processing of your personal data — for example, while you contest its accuracy.
Right to Data Portability (Section 65) Receive your personal data in a structured, commonly used, machine-readable format (CSV or JSON) and transmit it to another controller where technically feasible.
Right to Withdraw Consent (Section 15) Withdraw consent at any time via [email protected] or through account settings. Note: withdrawal results in account deletion and cessation of all processing.
Right to Complain (Section 68) Lodge a complaint with the Office of the Data Protection Commissioner of Zambia. You may also appeal any decision to the High Court of Zambia within 30 days.
12

Reviews and Ratings

Reviews and ratings submitted by Clients about Freelancers constitute personal data about the Freelancer. TaskCentro processes this data on the basis of legitimate interests — specifically to maintain the integrity and trustworthiness of the Platform.

Freelancers may request rectification of a review where they believe it contains factually inaccurate information, subject to TaskCentro's verification. Requests for erasure will be considered where the review was unlawfully submitted, is fraudulent, abusive, or violates TaskCentro's Terms. TaskCentro reserves the right to make final decisions on review removal.

13

Misuse of Personal Data by Users

TaskCentro does not permit or authorise any user to collect, store, misuse, or share the personal data of other users obtained through the Platform for any purpose outside the Platform or inconsistent with these Terms. Any such misuse constitutes a breach of the Act and may result in account suspension, civil liability, or referral to the relevant authorities.

Users who become aware of misuse of their personal data by another user should report it immediately at [email protected].

14

Data Breach Notification

In the event of a personal data breach affecting your information, TaskCentro will notify the Office of the Data Protection Commissioner within twenty-four (24) hours of becoming aware of the breach, in accordance with Section 49 of the Act.

Where the breach is likely to result in a risk to your rights or interests, we will also notify you as soon as practicable, providing details of the nature of the breach, the categories of data affected, the likely consequences, and the steps being taken to address it. Notifications will be sent to the email address associated with your account.

15

Links to Other Websites

The Platform may contain links to third-party websites not operated by TaskCentro. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites. We strongly advise you to review the privacy policy of every website you visit.

16

Accountability and Compliance

TaskCentro maintains internal records of all processing activities as required by Section 45 of the Act, and will carry out Data Protection Impact Assessments where processing activities involve new technologies or present a high risk to the rights and freedoms of individuals, in accordance with Section 46 of the Act.

TaskCentro is committed to full compliance with any Code of Conduct issued by the Data Protection Commissioner that applies to data controllers.

17

Changes to This Privacy Policy

TaskCentro may update this Privacy Policy from time to time to reflect changes in the law, our practices, or the Platform. We will notify you of any material changes by posting the updated Policy on this page and by email or in-platform notification prior to the change becoming effective.

18

Governing Law and Jurisdiction

This Privacy Policy is governed by the laws of the Republic of Zambia, including the Data Protection Act No. 3 of 2021. Any disputes arising out of or in connection with this Policy shall be subject to the jurisdiction of the courts of the Republic of Zambia.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Email: [email protected]

Website: taskcentro.com/contact